cve-2026-40683

HIGH CVSS 7.7 csaf_redhat
Description

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Timeline
Published
2026-04-14 20:05 UTC
Last Modified
2026-08-07
CVSS Details

CVSS details not available.

Affected Products

No product information available.

Weaknesses (CWE)
References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40683.json"
      }
    ],
    "title": "OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling",
    "tracking": {
      "current_release_date": "2026-08-07T11:20:46+00:00",
      "generator": {
        "date": "2026-08-07T11:20:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "CVE-2026-40683",
      "initial_release_date": "2026-04-14T20:05:03.274000+00:00",
      "revision_history": [
        {
          "date": "2026-04-14T20:05:03.274000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-16T15:33:39.643694+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-08-07T11:20:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 13 (Queens)",
                "product": {
                  "name": "Red Hat OpenStack Platform 13 (Queens)",
                  "product_id": "red_hat_openstack_platform_13_(queens)",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:13"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 13 (Queens)"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 16.2",
                "product": {
                  "name": "Red Hat OpenStack Platform 16.2",
                  "product_id": "red_hat_openstack_platform_16.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:16.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 16.2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 17.1",
                "product": {
                  "name": "Red Hat OpenStack Platform 17.1",
                  "product_id": "red_hat_openstack_platform_17.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:17.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 17.1"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 18.0",
                "product": {
                  "name": "Red Hat OpenStack Platform 18.0",
                  "product_id": "red_hat_openstack_platform_18.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:18.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 18.0"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Services on OpenShift 18.0",
                "product": {
                  "name": "Red Hat OpenStack Services on OpenShift 18.0",
                  "product_id": "9Base-RHOSO-18.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:18.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Services on OpenShift"
          },
          {
            "category": "product_version",
            "name": "rhosp13/openstack-keystone",
            "product": {
              "name": "rhosp13/openstack-keystone",
              "product_id": "rhosp13/openstack-keystone",
              "product_identification_helper": {
                "purl": "pkg:oci/openstack-keystone?repository_url=registry.redhat.io/rhosp13/openstack-keystone"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-keystone.src",
            "product": {
              "name": "openstack-keystone.src",
              "product_id": "openstack-keystone.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-keystone?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "python3-keystone",
            "product": {
              "name": "python3-keystone",
              "product_id": "python3-keystone",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/python3-keystone"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhosp-rhel8/openstack-keystone",
            "product": {
              "name": "rhosp-rhel8/openstack-keystone",
              "product_id": "rhosp-rhel8/openstack-keystone",
              "product_identification_helper": {
                "purl": "pkg:oci/openstack-keystone?repository_url=registry.redhat.io/rhosp-rhel8/openstack-keystone"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-keystone",
            "product": {
              "name": "openstack-keystone",
              "product_id": "openstack-keystone",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-keystone"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhosp-rhel9/openstack-keystone",
            "product": {
              "name": "rhosp-rhel9/openstack-keystone",
              "product_id": "rhosp-rhel9/openstack-keystone",
              "product_identification_helper": {
                "purl": "pkg:oci/openstack-keystone?repository_url=registry.redhat.io/rhosp-rhel9/openstack-keystone"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoso/openstack-keystone-rhel9",
            "product": {
              "name": "rhoso/openstack-keystone-rhel9",
              "product_id": "rhoso/openstack-keystone-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/openstack-keystone-rhel9?repository_url=registry.redhat.io/rhoso/openstack-keystone-rhel9"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
                "product": {
                  "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
                  "product_id": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-keystone@23.0.3-18.0.20260610133808.9e3dfb4.el9ost?arch=src&epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                "product": {
                  "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                  "product_id": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-keystone@23.0.3-18.0.20260610133808.9e3dfb4.el9ost?arch=noarch&epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                "product": {
                  "name": "python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                  "product_id": "python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-keystone@23.0.3-18.0.20260610133808.9e3dfb4.el9ost?arch=noarch&epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch"
        },
        "product_reference": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src"
        },
        "product_reference": "openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch"
        },
        "product_reference": "python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhosp13/openstack-keystone as a component of Red Hat OpenStack Platform 13 (Queens)",
          "product_id": "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone"
        },
        "product_reference": "rhosp13/openstack-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_13_(queens)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-keystone.src as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:openstack-keystone.src"
        },
        "product_reference": "openstack-keystone.src",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-keystone as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:python3-keystone"
        },
        "product_reference": "python3-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhosp-rhel8/openstack-keystone as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-keystone"
        },
        "product_reference": "rhosp-rhel8/openstack-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-keystone as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-keystone"
        },
        "product_reference": "openstack-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-keystone.src as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-keystone.src"
        },
        "product_reference": "openstack-keystone.src",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-keystone as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:python3-keystone"
        },
        "product_reference": "python3-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhosp-rhel9/openstack-keystone as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-keystone"
        },
        "product_reference": "rhosp-rhel9/openstack-keystone",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoso/openstack-keystone-rhel9 as a component of Red Hat OpenStack Platform 18.0",
          "product_id": "red_hat_openstack_platform_18.0:rhoso/openstack-keystone-rhel9"
        },
        "product_reference": "rhoso/openstack-keystone-rhel9",
        "relates_to_product_reference": "red_hat_openstack_platform_18.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40683",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type ('Type Confusion')"
      },
      "discovery_date": "2026-04-14T21:01:29.090472+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_openstack_platform_16.2:openstack-keystone.src",
            "red_hat_openstack_platform_16.2:python3-keystone",
            "red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone.src",
            "red_hat_openstack_platform_17.1:python3-keystone",
            "red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-keystone"
          ]
        },
        {
          "label": "component_not_present",
          "product_ids": [
            "red_hat_openstack_platform_18.0:rhoso/openstack-keystone-rhel9"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458472"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenStack Keystone. When using the LDAP identity backend, the system incorrectly processes the user enabled attribute if the user_enabled_invert configuration option is set to False. This error causes users marked as disabled in LDAP to be treated as enabled within Keystone, allowing them to authenticate and perform actions despite their disabled status. This can lead to unauthorized access to resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There's a flaw in OpenStack Keystone's LDAP identity backend allows unauthorized access. When the `user_enabled_invert` configuration option is set to its default of `False`, users marked as disabled in LDAP are incorrectly treated as enabled within Keystone. This enables them to authenticate and perform actions, affecting Red Hat OpenStack Platform deployments utilizing the LDAP identity backend without `user_enabled_invert=True` or `user_enabled_emulation` configured.\n\nThis flaw happens due to the fact that any non-empty string in the Python programing language are handled as `True`, openstack-keystone lacks the proper conversion from string to boolean type when reading the user enabled LDAP attribute when the `user_enabled_invert` configuration is set to false, this will lead to any previously existing user which is disabled in the LDAP side will be handled as enabled by the OpenStack Keystone.\n\nRed Hat Product Security has rated this flaw as having the severity of Moderate as for exploiting this flaw the attacker needs to have a previous access to the targeted system, additionally the impact will be limited to the same level of access the attacker had previously it had its user disabled in the LDAP side.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
          "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
          "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch"
        ],
        "known_affected": [
          "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone"
        ],
        "known_not_affected": [
          "red_hat_openstack_platform_16.2:openstack-keystone.src",
          "red_hat_openstack_platform_16.2:python3-keystone",
          "red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-keystone",
          "red_hat_openstack_platform_17.1:openstack-keystone",
          "red_hat_openstack_platform_17.1:openstack-keystone.src",
          "red_hat_openstack_platform_17.1:python3-keystone",
          "red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-keystone",
          "red_hat_openstack_platform_18.0:rhoso/openstack-keystone-rhel9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40683"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458472",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458472"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40683",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40683"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40683",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40683"
        },
        {
          "category": "external",
          "summary": "https://bugs.launchpad.net/keystone/+bug/2121152",
          "url": "https://bugs.launchpad.net/keystone/+bug/2121152"
        },
        {
          "category": "external",
          "summary": "https://bugs.launchpad.net/keystone/+bug/2141713",
          "url": "https://bugs.launchpad.net/keystone/+bug/2141713"
        },
        {
          "category": "external",
          "summary": "https://review.opendev.org/958205",
          "url": "https://review.opendev.org/958205"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/14/9",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/14/9"
        }
      ],
      "release_date": "2026-04-14T20:05:03.274000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-15T09:52:02+00:00",
          "details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
            "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:39808"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure OpenStack Keystone to correctly interpret the LDAP user enabled attribute. Set the `user_enabled_invert` option to `True` in the `keystone.conf` file.\n\nExample:\n```ini\n[ldap]\nuser_enabled_invert = True\n```\n\nAfter modifying the configuration, restart the Keystone service for the changes to take effect. This may temporarily disrupt authentication services.\n\nAdditionally the user should start using an LDAP attribute with inverted semantics (such as nsAccountLock) to match the same semantics of the keystone side.",
          "product_ids": [
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
            "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
            "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone",
            "red_hat_openstack_platform_16.2:openstack-keystone.src",
            "red_hat_openstack_platform_16.2:python3-keystone",
            "red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone.src",
            "red_hat_openstack_platform_17.1:python3-keystone",
            "red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-keystone",
            "red_hat_openstack_platform_18.0:rhoso/openstack-keystone-rhel9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.src",
            "9Base-RHOSO-18.0:python3-keystone-1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost.noarch",
            "red_hat_openstack_platform_13_(queens):rhosp13/openstack-keystone",
            "red_hat_openstack_platform_16.2:openstack-keystone.src",
            "red_hat_openstack_platform_16.2:python3-keystone",
            "red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone",
            "red_hat_openstack_platform_17.1:openstack-keystone.src",
            "red_hat_openstack_platform_17.1:python3-keystone",
            "red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-keystone",
            "red_hat_openstack_platform_18.0:rhoso/openstack-keystone-rhel9"
          ]
        }
      ],
      "title": "OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling"
    }
  ]
}
View JSON API Download JSON